Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32372e302f32342d3234203d3e20323639363536.roa
File:                     3230302e34392e32372e302f32342d3234203d3e20323639363536.roa (raw, json)
Hash identifier:          1uHsrPLcogQarW4ZlrRjB4gZ2l0QgHa/1XD7dDsGjEY=
Subject key identifier:   45:14:80:D9:E1:A1:11:1B:61:DF:F9:22:F4:A9:80:79:B3:92:FE:A7
Certificate issuer:       /CN=49C708D013D5FE74999800FB265B16FDF89861D3
Certificate serial:       7111CF74DD079DF1CA26FE7D9C18E11C8464B0B5
Authority key identifier: 49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32372e302f32342d3234203d3e20323639363536.roa
Signing time:             Wed 26 Aug 2026 12:57:42 +0000
ROA not before:           Wed 26 Aug 2026 12:52:42 +0000
ROA not after:            Wed 25 Aug 2027 12:57:42 +0000
asID:                     269656
IP address blocks:        200.49.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl
                          rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Sep 2026 01:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:cf:74:dd:07:9d:f1:ca:26:fe:7d:9c:18:e1:1c:84:64:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49C708D013D5FE74999800FB265B16FDF89861D3
        Validity
            Not Before: Aug 26 12:52:42 2026 GMT
            Not After : Aug 25 12:57:42 2027 GMT
        Subject: CN=451480D9E1A1111B61DFF922F4A98079B392FEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:7f:80:a5:79:8e:28:d8:ad:e4:2c:58:b2:
                    c4:ac:98:91:3b:67:ce:79:5d:05:2a:28:b4:3c:c5:
                    2c:26:5a:9c:31:31:0c:84:40:fb:ad:cd:e8:62:5f:
                    4e:09:e1:68:03:cb:1d:0f:55:93:0d:b5:3a:da:54:
                    16:cf:d4:fe:91:49:95:fa:cc:d2:b9:9f:b6:09:04:
                    d7:16:dc:5e:ec:24:9f:da:af:89:53:83:4a:db:7a:
                    9d:53:ec:6c:a1:9f:23:2f:07:c9:da:3d:74:b1:89:
                    65:dd:07:fe:e4:85:da:2e:f1:7c:6a:45:9e:04:1b:
                    a9:93:f4:18:8e:ce:06:09:fd:31:99:2a:a9:bf:a0:
                    57:e8:74:7d:11:c7:bf:47:35:f8:bb:39:2f:9e:7d:
                    1a:5f:8e:d4:55:47:60:de:35:72:0f:76:5e:e3:15:
                    ab:7b:77:1a:9e:e4:0b:35:94:a8:ef:8b:5c:d0:63:
                    c3:4d:a1:6e:6e:83:cc:f4:65:54:f2:c6:e9:02:e3:
                    4d:dc:c1:11:2f:c5:57:fc:f0:e6:07:1e:70:13:96:
                    4a:62:0a:e1:fe:0f:73:d8:51:e9:99:e1:e7:ba:91:
                    92:25:08:e0:91:a1:c4:7c:28:d6:45:8c:09:33:a8:
                    2d:68:9b:42:38:05:0b:30:9e:0f:ff:bb:3a:55:94:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:14:80:D9:E1:A1:11:1B:61:DF:F9:22:F4:A9:80:79:B3:92:FE:A7
            X509v3 Authority Key Identifier:
                keyid:49:C7:08:D0:13:D5:FE:74:99:98:00:FB:26:5B:16:FD:F8:98:61:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/49C708D013D5FE74999800FB265B16FDF89861D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49C708D013D5FE74999800FB265B16FDF89861D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD5KqQjirihY6BTDRgoqu2Jhr6XWpEzGvpXTDefKHF8v/0/3230302e34392e32372e302f32342d3234203d3e20323639363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:2b:73:37:d5:0f:17:5b:7f:fa:68:20:1c:8b:10:6d:d0:
         ef:9f:4d:87:e8:d8:e1:d5:94:56:66:49:f7:a4:79:4e:70:e3:
         56:f2:61:19:a4:e0:2f:3b:43:1d:52:b2:cd:6f:6c:87:09:46:
         b8:7d:c8:ea:da:6a:d6:82:55:91:43:fd:97:4d:c4:9a:c6:5e:
         68:79:75:19:a8:78:69:d7:bc:b2:4a:a6:51:8a:f0:4d:f7:44:
         64:a3:6a:32:e7:80:74:78:cd:91:0a:79:e6:8e:d9:df:8b:ae:
         9f:34:b9:6b:e6:98:af:79:6e:9c:f4:3f:d8:ee:a0:f3:44:8c:
         cb:4f:93:f1:ae:c1:ac:ca:44:bc:5f:21:3d:dd:72:8f:ab:d0:
         92:01:fd:1c:36:f1:99:61:4f:ca:b7:27:fa:ed:c1:9b:c4:20:
         26:7a:cf:00:72:c6:67:db:bd:ac:ac:e3:10:38:b6:b9:53:f3:
         d5:bf:5c:88:8e:be:e4:32:a4:b6:c6:0d:3c:90:bb:f2:66:e1:
         ba:ce:0c:c6:41:c8:6e:a0:30:64:9e:5a:4c:63:31:f7:9f:85:
         cf:e0:50:4b:05:92:e0:02:cb:44:8e:6b:4f:bd:aa:75:39:ff:
         1c:55:d0:7b:c2:ff:68:b3:70:30:ca:d4:2f:46:76:6e:88:72:
         4b:49:f3:31
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcRHPdN0HnfHKJv59nBjhHIRksLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDNzA4RDAxM0Q1RkU3NDk5OTgwMEZCMjY1QjE2RkRG
ODk4NjFEMzAeFw0yNjA4MjYxMjUyNDJaFw0yNzA4MjUxMjU3NDJaMDMxMTAvBgNV
BAMTKDQ1MTQ4MEQ5RTFBMTExMUI2MURGRjkyMkY0QTk4MDc5QjM5MkZFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIH+ApXmOKNit5CxYssSsmJE7
Z855XQUqKLQ8xSwmWpwxMQyEQPutzehiX04J4WgDyx0PVZMNtTraVBbP1P6RSZX6
zNK5n7YJBNcW3F7sJJ/ar4lTg0rbep1T7GyhnyMvB8naPXSxiWXdB/7khdou8Xxq
RZ4EG6mT9BiOzgYJ/TGZKqm/oFfodH0Rx79HNfi7OS+efRpfjtRVR2DeNXIPdl7j
Fat7dxqe5As1lKjvi1zQY8NNoW5ug8z0ZVTyxukC403cwREvxVf88OYHHnATlkpi
CuH+D3PYUemZ4ee6kZIlCOCRocR8KNZFjAkzqC1om0I4BQswng//uzpVlGTTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURRSA2eGhERth3/ki9KmAebOS/qcwHwYDVR0j
BBgwFoAUSccI0BPV/nSZmAD7JlsW/fiYYdMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkQ1S3FRamlyaWhZNkJURFJnb3F1MkpocjZYV3BFekd2cFhURGVmS0hG
OHYvMC80OUM3MDhEMDEzRDVGRTc0OTk5ODAwRkIyNjVCMTZGREY4OTg2MUQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5QzcwOEQwMTNENUZFNzQ5
OTk4MDBGQjI2NUIxNkZERjg5ODYxRDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JENUtxUWppcmloWTZCVERSZ29xdTJKaHI2WFdwRXpHdnBYVERlZktIRjh2LzAv
MzIzMDMwMmUzNDM5MmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyDEbMA0GCSqGSIb3DQEBCwUAA4IBAQAhyytzN9UP
F1t/+mggHIsQbdDvn02H6Njh1ZRWZkn3pHlOcONW8mEZpOAvO0MdUrLNb2yHCUa4
fcjq2mrWglWRQ/2XTcSaxl5oeXUZqHhp17yySqZRivBN90Rko2oy54B0eM2RCnnm
jtnfi66fNLlr5piveW6c9D/Y7qDzRIzLT5PxrsGsykS8XyE93XKPq9CSAf0cNvGZ
YU/Ktyf67cGbxCAmes8AcsZn272srOMQOLa5U/PVv1yIjr7kMqS2xg08kLvyZuG6
zgzGQchuoDBknlpMYzH3n4XP4FBLBZLgAstEjmtPvap1Of8cVdB7wv9os3AwytQv
RnZuiHJLSfMx
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:49:52 2026 by rpki-client